.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
Found 1 files trough .DS_Store spidering: /application
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
Found 1 files trough .DS_Store spidering: /application
Open service 207.120.36.141:443 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:15 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 13813122 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: d43844ce6601e772e280643812ff3459 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.138:443 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:15 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 10419973 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 8e7c5e6a104f126f784bc4f9e0799cb1 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.138:80 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:15 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 10419971 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 97bd44bb5a55af8c2888596f671eaed8 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.173:443 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:15 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 14096424 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: fcb06b4030b86aa86fdf32c377a52edd Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.173:80 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 14096414 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 97723e216990c34e56723d57d1849813 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.137:443 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 13936948 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: d8b471dc3abb5b7a3b754f9a712b9d8b Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.137:80 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 13936946 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: e0fb89010c3f93b6c151fd93d2542ff6 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.135:443 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 13813114 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 7304f9b45dd260420068ac65d48f0942 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.170:80 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 13969203 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 460819563e183422f7c542e793b23a33 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.141:80 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 13309307 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 1928155c838e930d9ad2d7e32445cee6 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.135:80 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 14096420 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 7e3cd3e717a4612ac24ed2af53f765ec Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.166:80 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 14096418 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 24ac4b6e1e725becd49b9da0ea945fb3 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.139:80 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 10419963 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: a176db01bcab899fdd04b72a8b80e1a9 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.166:443 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 13309305 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: fc3fab7e000c3f4246c80c57af226037 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.139:443 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:14 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 14096422 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 72d82d68355efa1c73384a427aa5c90d Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.170:443 · www.thevendorplugxo.com
2025-12-30 19:15
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 19:15:15 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 13902344 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 78c12e3e57aeda07d8ddc3b855803dc5 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:80 · thevendorplugxo.com
2025-12-30 12:26
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 12:26:08 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 44959769 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 3f02e23e4ff033068a57bdd9d69d2bcc Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · thevendorplugxo.com
2025-12-30 12:26
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 12:26:07 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 47841886 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 47d9a287411a83a297ec67f2d29781a7 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · thevendorplugxo.com
2025-12-30 06:36
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 06:36:22 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 45357162 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 72871b236f4de3e00c055e71d2dbb7aa Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.140:443 · www.thevendorplugxo.com
2025-12-30 06:09
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 06:09:49 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 6273885 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 3b292762cac5549298575da2f501374e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · thevendorplugxo.com
2025-12-22 07:45
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 07:45:33 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 18271618 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 6e31338e04d64ec91f0e7fc3b2103324 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.140:443 · www.thevendorplugxo.com
2025-12-22 06:46
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 06:46:09 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 7426301 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 5d4d53f77e36818b797d96add627d6a9 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · thevendorplugxo.com
2025-12-20 08:11
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 08:11:51 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 1069092 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 62f5506caf3b6efa552aa171a122282e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.140:443 · www.thevendorplugxo.com
2025-12-20 07:19
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 07:19:19 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4582123 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: f2940aba7c66c7b3af7b500fef2f2549 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>